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FEDERAL BUREAU OF INVESTIGATION 


Precedence ROUTINE - ` Date 2/04/2003 
To: San Diego 


From: San Diego 
Squad 15 . ; | "E 


Contact: SA[-— — — —— — — —] 


Drafted By: © [ip 


Case ep t:-(S/NF/0C) LL. å | (Pending) 


Title (S/NF/OC) SHAREEF ABDULMUTTALEB El-ARBI (USPER) 
IT-UBL/AL-QAEDA: 


(S/NF/OC) Der rom G-3 
D ify p 





Details: JÉ/NF/OC) L 1] became a subject of interest to the FBI 
San Diego Office subsequent to the arrest of E 
‚and surfaced out of the investigation from the 
09/11/2001, attacks because of their association to. the hijackers, 
Nawaf Al-Hazmi and. Khalid Almihdhar on Flight 17. | 


|) 

VK M/sr/oc) As background, on E “American Airlines 
representatives provided to FBI Headquarters the passenger manifest ` 
for American Airlines Flight #77. The names Nawaf Al-Hazmi and Khalid 


„Al-Midhar were included on the passenger manifest. 


Wi Mss 700). On 09/12/2001,.the Washington Field Office of 
the FBI was notified by the Dulles Airport Police that a suspicious 


"vehicle was found at the Dulles International Airport located in the 
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Eourly Lot, Row G, Herndon, Virginia. The suspicious vehicle was 
a as a 1998 Toyota. po BA "= 


m. 


ise 'S/NF/OC) Department of Motor Vehicle (DMV). em 
determined the 1988 Toyota, with California license plates, Vehicle 
Identification Number JT2AE92E9J3137546, was registered to Nawaf Al- 


. Hazmi, 8451 Mt. Vernon Way, Lemon Grove, California. 


e l 
Oh Kore: The vehicle was searched by agents. and found to: 


contain a me r n for Khalid Al-Midhar, from[ 
San Diego, California, a receipt for 
car service a alifornia Motor Works, San Diego, California, signed, 


by Khalid Al-Midhar, and an insurance card for Khalid Al-Midhar. 
Subsequent investigation determined that both Al- -Hazmi and Al -Midhar 
resided in San Diego in 1999 and 2000. l 


mm 


| Musse Also found during the search of Al-Hazmi's 
via) was,.a piece of paper wiu[ 2 written on it. 


Subsequent search of telephone databases revealed that the tele hone 
pań vas subscribed to PTT 


U $/NF/0C) On 09/20/2001, FBI agents located and 
in La Mesa, California. 
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K/NE/OC) Investigation by FBI determined that ] 
helped acciimate Al-Hazmi and Al-Midhar to the San Diego area and 
provided assistance with their travel arrangements and flight. lessons 
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aue 2^ NF/OC) On 09/21/2001, Mohdar Abdullah was arrested on a 
"Material Witness warrant for Penttbomb issued out of the Southern 
District of New York, after he declined to take a»polygraph 
examination. Abdullah's vehicle was subsequently seized. During the 
inventory search, a spiral notebook was obtained, which referenced 
PZ falling from the sky, mass killings and hijacking. 
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LH | 


(U) — J$/NF/0C) Derived EzÓm G-3 
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(U) 

(U) 

a Kanaan NF/OC) As background, on 09/11/2001, American Airlines 
bE representatives provided to FBI Headquarters the passenger manifest 
yc for American Airlines Flight 477. The names Nawaf Al-Hazmi and Khalid 

Al-Midhar were included on the passenger manifest. 
(W) o —J/NF/oc) On 09/12/2001, the Washington Field Office of 


En. FBI was notified by the Dulles Airport Police that a suspicious 
vehicle was found at the Dulles International Airport located in the 
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SEČRET/NOFORN/ORCON 


To: „San Diego From: San Diego 


Hourly Lot, Row G, Herndon, Virginia. The suspicious vehicle was 
described as a 1998 Toyota. 


iso Department of Motor Vehicle (DMV) records 
determined the 1988 Toyota, with California license plates, Vehicle 
Identification Number JT2AE92E9J3137546, was registered to Nawaf Al- 
Hazmi, 8451 Mt. Vernon Way, Lemon Grove, California. 






NF/OC) The vehicle was searched by agents an 

j ipti for Khalid Al-Midhar, from 

San Diego, California, a receipt for 
car service at California Motor Works, San Diego, California, signed 
by Khalid Al-Midhar, and an insurance card for Khalid Al-Midhar. 
Subsequent investigation determined that both Al-Hazmi and Al-Midhar 


resided in San Diego in 1999 and 2000. b6 
BTG 
(U) ye fo) Also found during the search of Al-Hazmi's 
: vehicle was a piece of paper with written on it. 
Subsequent search of telephone databases revealed that the telephone 
= ibed toļ | 


WA 


pipu 













NF/OC) On 09/20/2001, FBI agents located and 
interviewed California. dmitted that 
he was associated with telephone number 

advised that he was enrolled at Grossmont College. Investigation at 


Grossmont College revealed ollegiate email address as 





as an additional email account on his student recor 


Mage oc) C] provided the FBI with consent to search 
his residence and computer. The search uncovered a box-cutter and 
several computer-generated photographs of Usama Bin Laden. A 
subsequent search of the computer by the San Diego Regional Computer 


. Forensics Laboratory (RCFL) revealed several occurrences of email 
addresses, | and 


It also revealed email messages from 
earch also revealed an email 
address to email account, . 
ss3000@hotmail.com, On 10/30/2000 with the subject stating: "I'm very 
very Sorry." The FBI has determined that Al-Hazmi utilized the 
ss3000@hotmail.com account in late 2000 through early March 2001. 





pe oc Investigation by FBI determined that Abdullah 
helped acclimate Al-Hazmi and Al-Midhar to the San Diego area and 
provided assistance with their travel arrangements and flight lessons 
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To: San Diego From: San Diego 
e: Kaes 02/04/2003 


while in San Diego. In early 2001, Al-Hazmi telephonically contacted 
Abdullah and informed him that Al-Hazmi was in Arizona attending 
flight school. 


M) a te /0c) Abdullah provided the FBI consent to search his 
residence, Seen EnS in the seizure of his personal computer, located 


was an email message dated 09/13/2001, from 
There appeared to be an anti-American m A 
one to e message, as it queried, "Is it the same nation that was 


the only nation in history to use atomic weapons in anger...Does this 
hypocrite nation have the right to call anyone a terrorist just 
because they condemn its unjust practices?" 


(Uy = 


RCFL reveale 


NF/OC) A review of Abdullah's computer by San Diego 
checked his email from Abdullah's 
to Abdullah, 
in 2001. A home 

Y y Phone 
List," was E on Abdullah's computer. Within this directory were 
the following names and telephone numbers: 








NF/OC) On 09/11/2000, received 
"a note of appreciation and thanks" emai rom e Holy Land 
Foundation. (U) 


Ami FBI investigation at Grossmont 
College also revealed that email address, MOHDAR78@HOTMAIL.COM, was 
provided by Mohdar Abdullah as a point of contact. Grossmont College 
further provided the Abdullah's collegiate email address is listed as 
MOHDARABDULLAHGSTUDENTS.GCCCD.NET. 


T] fomnia tis 
u — M ien On 09/21/2001, Mohdar Abdullah was arrested on a 
Material Witness warrant for Penttbomb issued out of the Southern 
District of New York, after he declined to take a polygraph 
examination. Abdullah's vehicle was subsequently seized. During the 
. inventory search, a spiral notebook was obtained, which referenced 
planes falling from the sky, mass killings and hijacking. 


U |» (Ś/NF/OC) On 09/22/2001, agents obtained and executed a 
sealed federal search warrant for the current residence of Mohdar 
Abdullah at California. 
Abdullah was renting a room from and resided with 
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ow On 10/01/2001, the results of a court order 
were received by the FBI pertaining to Mohdar's email address, 
identified as mohdar78@hotmail.com. MSN Hotmail provided information 
that disclosed mohdar78@hotmail.com had activity from 08/15/1998 to 
09/26/2001. 
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| ba idving Arab tudies at a University, (name unknown to 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE | Date: 02/04/2003 b6 
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DATE: 01-25-2007. 
CLASSIFIED BY 60309 AUC/TAM/MLT/LRZ Derivative 


i , REASON: 1.4 (c) 
From: San Diego | DECLASSIFY ON: 01-25-2032 _ 


Squad 15 


UE | A 
case zm *: rc 1 (Pending) pC 


(j Titler- %/NF/0c) SHAREEF ABDULMUTTALEB E1-ARBI (USPER) 
IT-UBL/AL-QAEDA 


To: San Diego 





(U) nur oc) As background, on 09/11/2001, American Airlines 
representatives. provided to FBI Headquarters the passenger manifest 
for American Airlines Flight #77. The names Nawaf Al-Hazmi and Khalid 
Al-Midhar were included on the passenger manifest. 


(UT) Musee? On 09/12/2001, the Washington Field Office of 
the FBI was notified by the Dulles Airport Police that a suspicious 
vehicle was found at the Dulles International Airport located in the 
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To: M Diego From: San Diego- 
JAJ 


Re: i ae] | 02/04/2003 
(W) i 


Hourly Lot, Row G, Herndòn, Virginia. The suspicious vehicle was 
described as a 1998 Toyota. 


(U) <. NF/OC) Department of Motor Vehicle (DMV) records 
determined the 1988 Toyota, with California license plates, Vehicle 
Identification Number JT2AE92E9J3137546, was registered to Nawaf Al- 
Hazmi, 8451 Mt. Vernon Way, Lemon Grove, California. 


II -. /NF/OC) The vehicle was searched by agents and found to 
contain a medical prescription for Khalid Al-Midhar, from 


a receipt for 
car service a San Diego, California, signed 
by Khalid Al-Mīdhar,. an insurance card for Khalid Al-Midhar. 
Subsequent investigation determined that both Al-Hazmi and Al-Midhar 
resided in San Diego in 1999 and 2000. 















(V) (X/uF/oc) Also found during the search of Al-Hazmi's A 
vehicle was a piece of paper with written on it. 
Subsequent search of telephone databases revealed that the telephone 


Ni EE 

interviewe dmitted that 
he was associate 

advised that he was enroll nt College. Investigation at 
Grossmont College revealed collegiate email address as 





Ti- ; : 
m $Ś/NF/oc)[ provided the FBI with consent to search 
his residence and computer. The search uncovered a box-cutter and 


several computer-generated photographs of Usama Bin Laden. A 
subsequent search of the computer by the San Diego Regional Computer 


Forensics Laborator 


(RCFL) revealed several occurrences of email 
addresses, 


and 

It also revealed email messages from 
search also revealed an email 

to email account, 

n 10/30/2000 with the subject stating: "I'm very 
very sorry." The FBI has determined that Al-Hazmi utilized the 
ss3000@hotmail.com account in late 2000 through early March 2001. 









(UI —0$/NF/OC) Investigation by FBI determined that Abdullah 
helped acclimate Al-Hazmi and Al-Midhar to the San Diego area and 
provided assistance with their travel arrangements and flight lessons 
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(U) 


while in San Diego. In early 2001, Al-Hazmi telephonically contacted 
Abdullah and informed him that Al-Hazmi was in Arizona attending 
flight school. 


Wp foc) Abdullah provided the FBI consent to search his 
residence, resulting in the seizure of his personal computer, located 


on Abdullah's computer was an email message dated 09/13/2001, from 
pm eti There appeared to be an anti-American biased 
tone to the message, as it queried, "Is it the same nation that was 


the only nation in history to use atomic weapons in anger...Does this 
hypocrite nation have the right to call anyone a terrorist just 
because they condemn its unjust practices?" 


m er OC) A review of Abdullah's computer by San Diego 
RCFL revealed checked his email from Abdullah's 
computer and that sent several emails to Abdullah, 
and Omar Al-Bayoumi in 2001. A home 










directory fo 
List," was located on Abdullah's computer. Within this directory were 


the following names and telephone numbers: 
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3. 
(UI re/oc) on 09/11/2000, [l] received 
"a note of appreciation and thanks" emai rom the Holy Land 
Foundation. 
Dose FBI investigation at Grossmont 
College also revealed that email address, MOHDAR78@HOTMAIL.COM, was 
provided by Mohdar Abdullah as a point of contact. Grossmont College 


further provided the Abdullah's collegiate email address is listed as 
MOHDARABDULLAH@STUDENTS.GCCCD.NET. 


D eier On 09/21/2001, Mohdar Abdullah was arrested on a 
Material Withess warrant for Penttbomb issued out of the Southern 
District of New York, after he declined to take a polygraph 
examination. Abdullah's vehicle was subsequently seized. During the 
inventory search, a spiral notebook was obtained, which referenced 
planes falling from the sky, mass killings and hijacking. 


(U) zvoc) On 09/22/2001, agents obtained and executed a 
sealed federal search warrant for the current residence of Mohdar 


Abdullah at 1415 East Lexington Aven 14 ion, California. 
Abdullah was renting a room from and resided with 
en ei 
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Re: , pop | 02/04/2003 


TUE 
"m. 
U NF/OC) On 10/01/2001, the results of a court order 


were received by the FBI pertaining to Mohdar's email address, 
identified as mohdar78@hotmail.com. MSN Hotmail provided information 
that disclosed mohdar78@hotmail.com had activity from 08/15/1998 to 
09/26/2001. | 
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